How information is used when you visit the website, contact Tommy or buy music and books.
Last updated 17 October 2026Who is responsible
Tommy Sands is responsible for personal information collected through this website. For privacy enquiries or to exercise your rights, email info@tommysands.com or write to Tommy Sands, 50 Shore Road, Rostrevor, Co. Down BT34 3AA, Northern Ireland.
When you contact us
We use your name, email address, subject, message and any information you choose to include to respond to you and manage your enquiry. Please do not send passwords, payment-card details or sensitive personal information through the form. The details requested are needed to understand and reply to your message; you can contact us by email instead.
When you buy music or books
We collect your name, checkout email, billing address and country, selected recordings, prices, order reference, payment status and transaction references, and your agreement to immediate digital delivery. We use these details to perform the purchase contract, deliver recordings and receipts, provide replacement links and support, and meet record-keeping obligations. The website records download access events to protect purchases and investigate delivery problems. For book orders we also collect the delivery address, postal service and any signature or dedication request. Tommy receives these order details to post your book, and necessary delivery information is shared with the postal carrier. Please do not include sensitive personal information in a dedication.
PayPal payments
PayPal handles payment through its own service. We send PayPal the order amount, currency, recording descriptions, order references and billing/customer details needed to process the transaction. We receive payment confirmations and related transaction information. We do not receive your PayPal password or full payment-card details. PayPal processes payment information under its own privacy statement, available at www.paypal.com/uk/legalhub/paypal/privacy-full.
Why we use your information
For general correspondence, our lawful basis is our legitimate interest in responding to people who contact Tommy and managing his work. For enquiries about a booking or agreement with you, we also use information to take steps at your request before entering a contract, or to carry out that contract. Protecting the website from misuse is a legitimate interest. Legal obligations may require us to retain particular records. Sending an enquiry does not sign you up to a mailing list.
Where enquiries go
Messages are handled by Tommy and people authorised to help with his enquiries. Website enquiries may be stored in the website enquiry inbox. Email sent to info@tommysands.com is forwarded to Tommy’s Gmail mailbox. Hosting and email providers process information as part of providing those services. We do not sell your enquiry details. If a booking requires another representative’s involvement, we will explain this rather than circulate your message unnecessarily.
Hosting, email and overseas processing
The website relies on its hosting provider, and correspondence is handled using Google’s Gmail service. Those providers may process information outside the United Kingdom. The applicable processing locations and transfer arrangements depend on the service and account configuration. You can contact us for details about the arrangements relevant to your enquiry.
How long information is kept
Enquiry information is kept while a request is being dealt with and for as long afterwards as it is needed for related correspondence, a booking, record-keeping duties or a legal claim. The nature of the enquiry and any legal requirements determine that period. Information that is no longer needed should be deleted; you can ask us to review information held about you. Purchase, payment and delivery records are retained as needed to supply replacement downloads, handle support or disputes and meet accounting and legal record-keeping duties. The seven-day link expiry does not automatically delete your order record. Only authorised people supporting Tommy’s business can access these records.
Cookies and website security
The website uses essential session and security cookies where needed to operate the basket, checkout and forms, keep your current purchase session available and protect access. The server may record technical information such as IP addresses, requested pages and error details to operate the service and investigate misuse. The new website does not include advertising trackers or visitor analytics.
Videos and external links
Video thumbnails are hosted on this website. An external video player is loaded only when you choose to play a video. At that point YouTube or Vimeo receives information such as your IP address and may use cookies or similar technology under its own privacy policy. YouTube embeds use its privacy-enhanced domain; that does not mean playback is anonymous. Following an RTÉ, ticketing, social-media or other external link opens a service with its own privacy practices.
Your choices and rights
Depending on the circumstances, you can ask to access or correct your personal information, have it erased, restrict its use, object to processing based on legitimate interests, or receive a portable copy where that right applies. Where processing relies on consent, you can withdraw it. These rights are not absolute. Contact info@tommysands.com and we will consider your request. We may need to confirm your identity securely. We do not use enquiries for automated decisions that have legal or similarly significant effects.
Concerns and complaints
Please contact us if you have a concern about your information. You can also complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint/, or to the supervisory authority in your country where applicable.
Updates
This notice is updated when the website’s use of personal information changes. Buying music does not subscribe you to marketing emails.